$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa File: fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa (raw, json) Hash identifier: I6HJ7gm3husCVb23c6dZG47HGZPeH16p4VPRcz671WQ= Subject key identifier: F3:E0:66:3C:D8:0A:CE:D3:3A:94:B0:4E:02:CF:4D:7A:B8:B5:B4:12 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584AE8912498FFB05875F5E26600 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 395157 IP address blocks: 208.88.24.0/24 maxlen: 24 208.88.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:24:98:ff:b0:58:75:f5:e2:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=653355b6-406f-4173-9715-3dbd220a3a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:11:39:3f:1a:a6:ae:3c:9a:c2:08:5c:24:3a: 2d:11:5e:62:a7:7a:74:07:02:0d:fe:9f:e1:53:f6: 68:9b:85:ec:47:48:9c:d2:79:dc:ba:8e:a9:ab:e9: f2:df:aa:94:dd:b3:3d:04:0e:1c:6a:65:59:c0:53: 81:8a:09:44:de:f2:0a:5e:bf:ae:f6:84:31:a3:3a: 33:cc:df:cb:0e:5f:19:75:08:32:98:6e:48:5b:81: 69:cd:04:5c:f6:b3:62:37:0b:35:25:ee:ec:90:a8: fe:5d:eb:c3:34:75:fc:ad:85:98:72:76:41:f9:6a: 84:85:ee:cd:80:61:51:22:2f:ea:9e:88:95:95:47: b3:3c:0d:47:6e:1f:42:a4:65:9b:d1:bb:8e:2a:72: 30:65:1b:63:e5:f2:ee:9c:c7:2e:b8:ba:ef:0e:54: ce:3f:25:94:9b:83:9d:6f:18:a4:4b:d4:da:fd:73: a1:b5:f7:5d:a5:36:2f:ec:ad:fc:0a:7b:42:52:1a: 05:18:6a:19:58:88:bc:11:7f:15:af:26:df:2e:1f: 76:3d:d3:73:75:5c:9f:19:c3:12:cb:db:88:e1:69: 6c:e0:27:01:1f:0b:e7:a0:93:4b:e6:1e:00:68:81: 65:31:c7:0a:12:18:45:2b:f8:bf:6e:f3:8c:3e:3e: 18:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E0:66:3C:D8:0A:CE:D3:3A:94:B0:4E:02:CF:4D:7A:B8:B5:B4:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:57:fc:38:26:43:53:01:01:d3:1e:72:88:d1:36:c8:8b:60: f4:45:5f:3f:c5:d8:26:06:3b:61:89:42:ee:1c:d2:37:a3:cf: 26:ce:75:fc:e4:b4:67:b6:bb:fe:aa:3c:be:b0:9e:93:fd:5a: 97:2f:f1:f9:78:2a:c7:96:bb:37:87:9b:28:19:ca:27:a6:5a: 39:dc:9b:d7:90:25:c5:38:01:b8:7e:69:68:66:76:ca:ba:2c: 26:79:46:5d:ea:54:23:1b:c4:0e:39:d7:d5:02:62:e4:1d:e3: 16:3b:13:29:1b:a0:6e:bf:e8:0c:97:7d:e8:a8:91:d9:e5:90: 46:36:10:47:58:61:8e:9a:87:bc:29:ec:10:c4:ba:5d:a1:99: ca:48:cd:2b:33:e4:e0:56:9e:d2:e1:ab:27:2e:33:86:9c:71: 82:3e:08:33:ab:b6:30:51:3b:90:1e:d5:90:d0:db:c9:2f:d3: 97:2e:79:0e:86:d6:76:c6:8d:72:ee:2d:29:77:05:30:a4:f9: dd:18:0a:03:a0:1d:cd:42:2e:02:18:8f:d1:06:21:e3:b9:c5: 14:72:9a:2c:e3:fd:06:ae:f4:29:cd:93:db:e0:ec:9a:64:a0: 32:90:e3:06:c7:a8:3b:17:7b:0c:67:cf:fd:7e:1a:d2:4a:2c: ab:e7:ba:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokSSY/7BYdfXiZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NjUzMzU1YjYtNDA2Zi00MTczLTk3MTUtM2RiZDIyMGEzYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RE5PxqmrjyawghcJDotEV5ip3p0BwIN/p/h U/Zom4XsR0ic0nncuo6pq+ny36qU3bM9BA4camVZwFOBiglE3vIKXr+u9oQxozoz zN/LDl8ZdQgymG5IW4FpzQRc9rNiNws1Je7skKj+XevDNHX8rYWYcnZB+WqEhe7N gGFRIi/qnoiVlUezPA1Hbh9CpGWb0buOKnIwZRtj5fLunMcuuLrvDlTOPyWUm4Od bxikS9Ta/XOhtfddpTYv7K38CntCUhoFGGoZWIi8EX8VrybfLh92PdNzdVyfGcMS y9uI4Wls4CcBHwvnoJNL5h4AaIFlMccKEhhFK/i/bvOMPj4YqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPgZjzYCs7TOpSwTgLPTXq4tbQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvZmExM2Q0YmYtYzZiYy0z MGU5LWFkYTQtMjUwZTUxYTEwN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBX/DgmQ1MBAdMecojRNsiLYPRFXz/F2CYGO2GJQu4c0jejzybOdfzk tGe2u/6qPL6wnpP9Wpcv8fl4KseWuzeHmygZyiemWjncm9eQJcU4Abh+aWhmdsq6 LCZ5Rl3qVCMbxA4519UCYuQd4xY7EykboG6/6AyXfeiokdnlkEY2EEdYYY6ah7wp 7BDEul2hmcpIzSsz5OBWntLhqycuM4accYI+CDOrtjBRO5Ae1ZDQ28kv05cueQ6G 1nbGjXLuLSl3BTCk+d0YCgOgHc1CLgIYj9EGIeO5xRRymizj/Qau9CnNk9vg7Jpk oDKQ4wbHqDsXewxnz/1+GtJKLKvnuqg= -----END CERTIFICATE-----Generated at Sun Aug 24 11:37:20 2025 by rpki-client